@fgrzl/fetch 1.1.0-alpha.2 → 1.1.0-alpha.7

package/dist/cjs/middleware/cache/types.d.ts

@@ -0,0 +1,89 @@
+/**
+ * @fileoverview Cache middleware types and configuration.
+ */
+/**
+ * Cache key generator function.
+ * Should return a unique key for the request.
+ */
+export type CacheKeyGenerator = (request: RequestInit & {
+    url?: string;
+}) => string;
+/**
+ * Cache storage interface.
+ * Allows custom cache implementations.
+ */
+export interface CacheStorage {
+    get(key: string): Promise<CacheEntry | null>;
+    getWithExpiry?(key: string): Promise<{
+        entry: CacheEntry | null;
+        isExpired: boolean;
+    }>;
+    set(key: string, entry: CacheEntry): Promise<void>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+}
+/**
+ * Cached response entry.
+ */
+export interface CacheEntry {
+    response: {
+        status: number;
+        statusText: string;
+        headers: Record<string, string>;
+        data: unknown;
+    };
+    timestamp: number;
+    expiresAt: number;
+}
+/**
+ * Cache configuration options - optimized for "pit of success".
+ *
+ * Smart defaults:
+ * - Only caches GET requests
+ * - 5 minute default TTL
+ * - Memory-based storage
+ * - Automatic cache key generation
+ */
+export interface CacheOptions {
+    /**
+     * Time to live in milliseconds (default: 300000 = 5 minutes)
+     * How long responses should be cached
+     */
+    ttl?: number;
+    /**
+     * HTTP methods to cache (default: ['GET'])
+     * Only these methods will be cached
+     */
+    methods?: string[];
+    /**
+     * Cache storage implementation (default: in-memory)
+     * Can be replaced with localStorage, IndexedDB, etc.
+     */
+    storage?: CacheStorage;
+    /**
+     * Custom cache key generator (default: URL + method + headers)
+     * Should return a unique key for each request
+     *
+     * @example Custom key generator:
+     * ```typescript
+     * keyGenerator: (request) => `${request.method}:${request.url}`
+     * ```
+     */
+    keyGenerator?: CacheKeyGenerator;
+    /**
+     * Skip caching for requests matching these URL patterns
+     *
+     * @example
+     * ```typescript
+     * skipPatterns: [/\/api\/user/, '/dynamic-data']
+     * ```
+     */
+    skipPatterns?: (RegExp | string)[];
+    /**
+     * Whether to serve stale cache entries while revalidating
+     * When true, returns cached data immediately and updates cache in background
+     */
+    staleWhileRevalidate?: boolean;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/middleware/cache/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/middleware/cache/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,WAAW,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KACpC,MAAM,CAAC;AAEZ;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,aAAa,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IAEvB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAEjC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAEnC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAGD,OAAO,EAAE,CAAC"}

package/dist/cjs/middleware/cache/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * @fileoverview Cache middleware types and configuration.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/middleware/cache/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/middleware/cache/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/cjs/middleware/csrf/csrf.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @fileoverview CSRF protection middleware implementation.
+ */
+import type { FetchMiddleware } from '../../client/fetch-client';
+import type { CSRFOptions } from './types';
+/**
+ * Creates CSRF protection middleware with smart defaults.
+ * Automatically adds CSRF tokens to state-changing requests.
+ *
+ * @param options - CSRF configuration options (all optional for "pit of success")
+ * @returns CSRF middleware for use with FetchClient
+ *
+ * @example Basic usage (uses cookies automatically):
+ * ```typescript
+ * const client = new FetchClient();
+ * const csrfClient = useCSRF(client);
+ * ```
+ *
+ * @example Custom token provider:
+ * ```typescript
+ * const csrfClient = useCSRF(client, {
+ *   tokenProvider: () => localStorage.getItem('csrf-token') || ''
+ * });
+ * ```
+ *
+ * @example Skip external APIs:
+ * ```typescript
+ * const csrfClient = useCSRF(client, {
+ *   skipPatterns: [/^https:\/\/api\.external\.com\//, '/webhook/']
+ * });
+ * ```
+ */
+export declare function createCSRFMiddleware(options?: CSRFOptions): FetchMiddleware;
+//# sourceMappingURL=csrf.d.ts.map

package/dist/cjs/middleware/csrf/csrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../../../src/middleware/csrf/csrf.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAwC3C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,WAAgB,GACxB,eAAe,CA4CjB"}

package/dist/cjs/middleware/csrf/csrf.js

@@ -0,0 +1,94 @@
+"use strict";
+/**
+ * @fileoverview CSRF protection middleware implementation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCSRFMiddleware = createCSRFMiddleware;
+/**
+ * Default CSRF token provider that extracts token from XSRF-TOKEN cookie.
+ * This follows the standard convention used by Rails, Laravel, and many other frameworks.
+ */
+function getTokenFromCookie(cookieName = 'XSRF-TOKEN') {
+    if (typeof document === 'undefined') {
+        return ''; // Server-side, no cookies available
+    }
+    const name = `${cookieName}=`;
+    const decodedCookie = decodeURIComponent(document.cookie);
+    const cookies = decodedCookie.split(';');
+    for (const cookie of cookies) {
+        const c = cookie.trim();
+        if (c.indexOf(name) === 0) {
+            return c.substring(name.length);
+        }
+    }
+    return '';
+}
+/**
+ * Checks if a URL should skip CSRF protection based on configured patterns.
+ */
+function shouldSkipCSRF(url, skipPatterns = []) {
+    return skipPatterns.some((pattern) => {
+        if (typeof pattern === 'string') {
+            return url.includes(pattern);
+        }
+        return pattern.test(url);
+    });
+}
+/**
+ * Creates CSRF protection middleware with smart defaults.
+ * Automatically adds CSRF tokens to state-changing requests.
+ *
+ * @param options - CSRF configuration options (all optional for "pit of success")
+ * @returns CSRF middleware for use with FetchClient
+ *
+ * @example Basic usage (uses cookies automatically):
+ * ```typescript
+ * const client = new FetchClient();
+ * const csrfClient = useCSRF(client);
+ * ```
+ *
+ * @example Custom token provider:
+ * ```typescript
+ * const csrfClient = useCSRF(client, {
+ *   tokenProvider: () => localStorage.getItem('csrf-token') || ''
+ * });
+ * ```
+ *
+ * @example Skip external APIs:
+ * ```typescript
+ * const csrfClient = useCSRF(client, {
+ *   skipPatterns: [/^https:\/\/api\.external\.com\//, '/webhook/']
+ * });
+ * ```
+ */
+function createCSRFMiddleware(options = {}) {
+    // Smart defaults for "pit of success"
+    const { headerName = 'X-XSRF-TOKEN', cookieName = 'XSRF-TOKEN', protectedMethods = ['POST', 'PUT', 'PATCH', 'DELETE'], skipPatterns = [], tokenProvider = () => getTokenFromCookie(cookieName), } = options;
+    return async (request, next) => {
+        const method = (request.method || 'GET').toUpperCase();
+        const url = request.url || '';
+        // Skip CSRF protection if:
+        // 1. Method is not in protected methods list
+        // 2. URL matches a skip pattern
+        if (!protectedMethods.includes(method) ||
+            shouldSkipCSRF(url, skipPatterns)) {
+            return next(request);
+        }
+        // Get CSRF token
+        const token = tokenProvider();
+        // Skip if no token available (let the server handle the error)
+        if (!token) {
+            return next(request);
+        }
+        // Add CSRF token to request headers
+        const headers = new Headers(request.headers);
+        headers.set(headerName, token);
+        // Create modified request with CSRF header
+        const modifiedRequest = {
+            ...request,
+            headers,
+        };
+        return next(modifiedRequest);
+    };
+}
+//# sourceMappingURL=csrf.js.map

package/dist/cjs/middleware/csrf/csrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../../../src/middleware/csrf/csrf.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAsEH,oDA8CC;AA/GD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,aAAqB,YAAY;IAC3D,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC,CAAC,oCAAoC;IACjD,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC;IAC9B,MAAM,aAAa,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,GAAW,EACX,eAAoC,EAAE;IAEtC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAgB,oBAAoB,CAClC,UAAuB,EAAE;IAEzB,sCAAsC;IACtC,MAAM,EACJ,UAAU,GAAG,cAAc,EAC3B,UAAU,GAAG,YAAY,EACzB,gBAAgB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EACrD,YAAY,GAAG,EAAE,EACjB,aAAa,GAAG,GAAG,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,GACrD,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAE9B,2BAA2B;QAC3B,6CAA6C;QAC7C,gCAAgC;QAChC,IACE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClC,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,EACjC,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAED,iBAAiB;QACjB,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAE9B,+DAA+D;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAED,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE/B,2CAA2C;QAC3C,MAAM,eAAe,GAAG;YACtB,GAAG,OAAO;YACV,OAAO;SACR,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/middleware/csrf/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @fileoverview CSRF protection middleware - "pit of success" API.
+ */
+import type { FetchClient } from '../../client/fetch-client';
+import type { CSRFOptions } from './types';
+export type { CSRFOptions, CSRFTokenProvider } from './types';
+export { createCSRFMiddleware } from './csrf';
+/**
+ * "Pit of success" API for adding CSRF protection to a FetchClient.
+ * Uses smart defaults that work with most web frameworks out of the box.
+ *
+ * Default behavior:
+ * - Reads CSRF token from XSRF-TOKEN cookie
+ * - Adds X-XSRF-TOKEN header to POST, PUT, PATCH, DELETE requests
+ * - Skips GET/HEAD requests (they don't need CSRF protection)
+ *
+ * @param client - The FetchClient to add CSRF protection to
+ * @param options - Optional CSRF configuration
+ * @returns A new FetchClient with CSRF protection
+ *
+ * @example Basic usage (automatic cookie-based CSRF):
+ * ```typescript
+ * const client = new FetchClient();
+ * const protectedClient = useCSRF(client);
+ *
+ * // CSRF token automatically added to POST requests
+ * await protectedClient.post('/api/users', { name: 'John' });
+ * ```
+ *
+ * @example Custom token provider:
+ * ```typescript
+ * const protectedClient = useCSRF(client, {
+ *   tokenProvider: () => localStorage.getItem('csrf-token') || ''
+ * });
+ * ```
+ *
+ * @example Custom header and cookie names:
+ * ```typescript
+ * const protectedClient = useCSRF(client, {
+ *   headerName: 'X-CSRF-Token',
+ *   cookieName: 'csrf-token'
+ * });
+ * ```
+ *
+ * @example Skip patterns for external APIs:
+ * ```typescript
+ * const protectedClient = useCSRF(client, {
+ *   skipPatterns: [
+ *     /^https:\/\/api\.external\.com\//,  // Skip external API
+ *     '/webhook/',                        // Skip webhook endpoints
+ *     '/public-api/'                      // Skip public API endpoints
+ *   ]
+ * });
+ * ```
+ */
+export declare function useCSRF(client: FetchClient, options?: CSRFOptions): FetchClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/middleware/csrf/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/middleware/csrf/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAI3C,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,wBAAgB,OAAO,CACrB,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,WAAgB,GACxB,WAAW,CAEb"}

package/dist/cjs/middleware/csrf/index.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * @fileoverview CSRF protection middleware - "pit of success" API.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCSRFMiddleware = void 0;
+exports.useCSRF = useCSRF;
+const csrf_1 = require("./csrf");
+var csrf_2 = require("./csrf");
+Object.defineProperty(exports, "createCSRFMiddleware", { enumerable: true, get: function () { return csrf_2.createCSRFMiddleware; } });
+/**
+ * "Pit of success" API for adding CSRF protection to a FetchClient.
+ * Uses smart defaults that work with most web frameworks out of the box.
+ *
+ * Default behavior:
+ * - Reads CSRF token from XSRF-TOKEN cookie
+ * - Adds X-XSRF-TOKEN header to POST, PUT, PATCH, DELETE requests
+ * - Skips GET/HEAD requests (they don't need CSRF protection)
+ *
+ * @param client - The FetchClient to add CSRF protection to
+ * @param options - Optional CSRF configuration
+ * @returns A new FetchClient with CSRF protection
+ *
+ * @example Basic usage (automatic cookie-based CSRF):
+ * ```typescript
+ * const client = new FetchClient();
+ * const protectedClient = useCSRF(client);
+ *
+ * // CSRF token automatically added to POST requests
+ * await protectedClient.post('/api/users', { name: 'John' });
+ * ```
+ *
+ * @example Custom token provider:
+ * ```typescript
+ * const protectedClient = useCSRF(client, {
+ *   tokenProvider: () => localStorage.getItem('csrf-token') || ''
+ * });
+ * ```
+ *
+ * @example Custom header and cookie names:
+ * ```typescript
+ * const protectedClient = useCSRF(client, {
+ *   headerName: 'X-CSRF-Token',
+ *   cookieName: 'csrf-token'
+ * });
+ * ```
+ *
+ * @example Skip patterns for external APIs:
+ * ```typescript
+ * const protectedClient = useCSRF(client, {
+ *   skipPatterns: [
+ *     /^https:\/\/api\.external\.com\//,  // Skip external API
+ *     '/webhook/',                        // Skip webhook endpoints
+ *     '/public-api/'                      // Skip public API endpoints
+ *   ]
+ * });
+ * ```
+ */
+function useCSRF(client, options = {}) {
+    return client.use((0, csrf_1.createCSRFMiddleware)(options));
+}
+//# sourceMappingURL=index.js.map

package/dist/cjs/middleware/csrf/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/middleware/csrf/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AA0DH,0BAKC;AA3DD,iCAA8C;AAI9C,+BAA8C;AAArC,4GAAA,oBAAoB,OAAA;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,SAAgB,OAAO,CACrB,MAAmB,EACnB,UAAuB,EAAE;IAEzB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAA,2BAAoB,EAAC,OAAO,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/cjs/middleware/csrf/types.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @fileoverview CSRF protection middleware types and configuration.
+ */
+/**
+ * CSRF token provider function.
+ * Should return the current CSRF token or empty string if not available.
+ */
+export type CSRFTokenProvider = () => string;
+/**
+ * CSRF configuration options - optimized for "pit of success".
+ *
+ * Smart defaults:
+ * - Uses standard X-XSRF-TOKEN header
+ * - Automatically extracts token from XSRF-TOKEN cookie
+ * - Only adds token to state-changing methods (POST, PUT, PATCH, DELETE)
+ */
+export interface CSRFOptions {
+    /**
+     * Function to get the current CSRF token.
+     * Default: extracts from XSRF-TOKEN cookie (standard Rails/Laravel convention)
+     *
+     * @returns The CSRF token or empty string if not available
+     *
+     * @example Custom token provider:
+     * ```typescript
+     * const getToken = () => localStorage.getItem('csrf-token') || '';
+     * ```
+     */
+    tokenProvider?: CSRFTokenProvider;
+    /**
+     * Header name to use for CSRF token (default: 'X-XSRF-TOKEN')
+     * Common alternatives: 'X-CSRF-Token', 'X-CSRFToken'
+     */
+    headerName?: string;
+    /**
+     * Cookie name to read token from when using default provider (default: 'XSRF-TOKEN')
+     * Common alternatives: 'csrf-token', '_token'
+     */
+    cookieName?: string;
+    /**
+     * HTTP methods that require CSRF protection (default: ['POST', 'PUT', 'PATCH', 'DELETE'])
+     * GET and HEAD requests typically don't need CSRF tokens
+     */
+    protectedMethods?: string[];
+    /**
+     * Skip CSRF protection for requests matching these URL patterns
+     * Useful for external API calls that don't need CSRF tokens
+     *
+     * @example
+     * ```typescript
+     * skipPatterns: [/^https:\/\/api\.external\.com\//, '/public-api/']
+     * ```
+     */
+    skipPatterns?: (RegExp | string)[];
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/middleware/csrf/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/middleware/csrf/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAElC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACpC;AAGD,OAAO,EAAE,CAAC"}

package/dist/cjs/middleware/csrf/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * @fileoverview CSRF protection middleware types and configuration.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/middleware/csrf/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/middleware/csrf/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/cjs/middleware/index.d.ts

@@ -0,0 +1,115 @@
+/**
+ * @fileoverview Complete middleware collection for FetchClient - "pit of success" APIs.
+ *
+ * This module provides a comprehensive set of middleware for common HTTP client concerns:
+ * - 🔐 Authentication: Bearer token injection
+ * - 🛡️ Authorization: 401/403 response handling
+ * - 💾 Cache: Response caching with TTL
+ * - 🔒 CSRF: Cross-site request forgery protection
+ * - 📝 Logging: Request/response logging
+ * - 🚦 Rate Limiting: Request rate limiting with token bucket
+ * - 🔄 Retry: Automatic retry with backoff
+ *
+ * Each middleware follows the "pit of success" pattern with:
+ * - Smart defaults for common scenarios
+ * - Simple `use{Middleware}()` convenience functions
+ * - Advanced `create{Middleware}Middleware()` for custom scenarios
+ * - Comprehensive TypeScript support
+ *
+ * @example Quick setup with multiple middleware:
+ * ```typescript
+ * import { FetchClient } from '@fgrzl/fetch';
+ * import { useAuthentication, useRetry, useLogging } from '@fgrzl/fetch/middleware';
+ *
+ * const client = new FetchClient();
+ * const enhancedClient = useAuthentication(client, {
+ *   tokenProvider: () => localStorage.getItem('auth-token') || ''
+ * })
+ * .pipe(useRetry, { retries: 3 })
+ * .pipe(useLogging);
+ * ```
+ */
+export type { AuthenticationOptions, AuthTokenProvider, } from './authentication';
+export { useAuthentication, createAuthenticationMiddleware, } from './authentication';
+export type { AuthorizationOptions, UnauthorizedHandler, } from './authorization';
+export { useAuthorization, createAuthorizationMiddleware, } from './authorization';
+export type { CacheOptions, CacheStorage, CacheEntry, CacheKeyGenerator, } from './cache';
+export { useCache, createCacheMiddleware } from './cache';
+export { useCSRF } from './csrf';
+export type { LoggingOptions, Logger, LogLevel } from './logging';
+export { useLogging, createLoggingMiddleware } from './logging';
+export type { RateLimitOptions, RateLimitAlgorithm } from './rate-limit';
+export { useRateLimit, createRateLimitMiddleware } from './rate-limit';
+export type { RetryOptions } from './retry';
+export { useRetry, createRetryMiddleware } from './retry';
+/**
+ * Common middleware combinations for typical use cases.
+ * These provide pre-configured middleware stacks for common scenarios.
+ */
+import type { FetchClient } from '../client/fetch-client';
+import { useAuthentication } from './authentication';
+import { useRetry } from './retry';
+import { useLogging } from './logging';
+import { useCache } from './cache';
+import { useRateLimit } from './rate-limit';
+/**
+ * Production-ready middleware stack with authentication, retry, logging, and caching.
+ * Perfect for API clients that need reliability and observability.
+ *
+ * @param client - The FetchClient to enhance
+ * @param config - Configuration for each middleware
+ * @returns Enhanced FetchClient with production middleware stack
+ *
+ * @example
+ * ```typescript
+ * const apiClient = useProductionStack(new FetchClient(), {
+ *   auth: { tokenProvider: () => getAuthToken() },
+ *   cache: { ttl: 5 * 60 * 1000 }, // 5 minutes
+ *   logging: { level: 'info' }
+ * });
+ * ```
+ */
+export declare function useProductionStack(client: FetchClient, config?: {
+    auth?: Parameters<typeof useAuthentication>[1];
+    retry?: Parameters<typeof useRetry>[1];
+    cache?: Parameters<typeof useCache>[1];
+    logging?: Parameters<typeof useLogging>[1];
+    rateLimit?: Parameters<typeof useRateLimit>[1];
+}): FetchClient;
+/**
+ * Development-friendly middleware stack with comprehensive logging and retries.
+ * Perfect for local development and debugging.
+ *
+ * @param client - The FetchClient to enhance
+ * @param config - Configuration for development middleware
+ * @returns Enhanced FetchClient with development middleware stack
+ *
+ * @example
+ * ```typescript
+ * const devClient = useDevelopmentStack(new FetchClient(), {
+ *   auth: { tokenProvider: () => 'dev-token' }
+ * });
+ * ```
+ */
+export declare function useDevelopmentStack(client: FetchClient, config?: {
+    auth?: Parameters<typeof useAuthentication>[1];
+}): FetchClient;
+/**
+ * Basic middleware stack with just authentication and retry.
+ * Perfect for simple API clients that need minimal overhead.
+ *
+ * @param client - The FetchClient to enhance
+ * @param config - Basic configuration
+ * @returns Enhanced FetchClient with basic middleware stack
+ *
+ * @example
+ * ```typescript
+ * const basicClient = useBasicStack(new FetchClient(), {
+ *   auth: { tokenProvider: () => getToken() }
+ * });
+ * ```
+ */
+export declare function useBasicStack(client: FetchClient, config: {
+    auth: Parameters<typeof useAuthentication>[1];
+}): FetchClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,YAAY,EACV,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,iBAAiB,EACjB,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,iBAAiB,GAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAG1D,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGjC,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAGhE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAGvE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAE1D;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,MAAM,GAAE;IACN,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3C,GACL,WAAW,CAyBb;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EACnB,MAAM,GAAE;IACN,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3C,GACL,WAAW,CAsBb;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE;IACN,IAAI,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/C,GACA,WAAW,CAEb"}